winzheng看到的样本

显示全部楼层 · 发表于 2008-6-14 20:57:28

122222

显示全部楼层 · 发表于 2008-6-14 21:00:42

Access to the data has been denied!
Warning: A virus or unwanted program has been found in the HTTP Data.

Requested URL: http://bbs.kafan.cn/attachment.p ... 3a&t=1213448431
Information: Contains a detection pattern of the (dangerous) backdoor program BDS/Backdoor.Gen Backdoor server programs

Generated by AntiVir WebGuard 8.0.13.0, AVE 8.1.0.55, VDF 7.0.4.196

显示全部楼层 · 发表于 2008-6-14 21:01:59

File Server.exe received on 06.14.2008 14:56:11 (CET)
Current status: finished
Result: 7/32 (21.88%)
Compact
Print results Antivirus Version Last Update Result
AhnLab-V3 2008.6.13.1 2008.06.13 -
AntiVir 7.8.0.55 2008.06.14 BDS/Backdoor.Gen
Authentium 5.1.0.4 2008.06.14 W32/OnlineGames.A.gen!Eldorado
Avast 4.8.1195.0 2008.06.14 -
AVG 7.5.0.516 2008.06.13 -
BitDefender 7.2 2008.06.14 -
CAT-QuickHeal 9.50 2008.06.14 -
ClamAV 0.92.1 2008.06.14 -
DrWeb 4.44.0.09170 2008.06.14 -
eSafe 7.0.15.0 2008.06.12 -
eTrust-Vet 31.6.5873 2008.06.14 -
Ewido 4.0 2008.06.14 -
F-Prot 4.4.4.56 2008.06.12 W32/OnlineGames.A.gen!Eldorado
F-Secure 6.70.13260.0 2008.06.13 Suspicious:W32/Malware!Gemini
Fortinet 3.14.0.0 2008.06.14 -
GData 2.0.7306.1023 2008.06.14 -
Ikarus T3.1.1.26.0 2008.06.14 -
Kaspersky 7.0.0.125 2008.06.14 -
McAfee 5317 2008.06.13 -
Microsoft 1.3604 2008.06.14 Backdoor:Win32/Delf.RAN
NOD32v2 3186 2008.06.13 -
Norman 5.80.02 2008.06.13 -
Panda 9.0.0.4 2008.06.14 -
Prevx1 V2 2008.06.14 -
Rising 20.48.52.00 2008.06.14 -
Sophos 4.30.0 2008.06.14 Troj/Delf-FAH
Sunbelt 3.0.1145.1 2008.06.05 -
Symantec 10 2008.06.14 -
TheHacker 6.2.92.349 2008.06.13 -
VBA32 3.12.6.7 2008.06.14 -
VirusBuster 4.3.26:9 2008.06.12 -
Webwasher-Gateway 6.6.2 2008.06.14 Trojan.Backdoor.Backdoor.Gen

显示全部楼层 · 发表于 2008-6-14 21:16:34

kis8攔

显示全部楼层 · 发表于 2008-6-14 21:17:30

kis2009 0

显示全部楼层 · 发表于 2008-6-14 21:20:12

RS20.48.52未杀！

显示全部楼层 · 发表于 2008-6-14 21:23:39

[Found password stealer] <W32/OnlineGames.A.gen!Eldorado (not disinfectable, generic)> C:\Documents and Settings\All Users\Documents\Test\Server.rar->Server.exe->rsrcPE

---------------------------------------------------------------------
Scan ended: 2008-6-14, 21:23:32
Duration: 0:00:00

Scan result:

Scanned files:    6
Infected objects:    1
Disinfected objects:    0
Quarantined files:    0
---------------------------------------------------------------------

显示全部楼层 · 发表于 2008-6-14 21:33:23

蜘蛛飘过！~

显示全部楼层 · 发表于 2008-6-14 23:25:13

TF砍了。。。
没抓到图

显示全部楼层 · 发表于 2008-6-15 22:02:22

McAfee MISS

[病毒样本] winzheng看到的样本

本帖子中包含更多资源

本帖子中包含更多资源

3/0

F-Prot 4.4.4